nemo-curator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests outsider-authored free text when the pipeline loads Common Crawl/parquet inputs (e.g., DocumentDataset.read_parquet("common_crawl/*.parquet")), where the text field comes from public web pages authored by third parties and is then passed through filters/dedup/PII modules into the LLM context (e.g., via classifier/embedding steps that consume the document text).